GHSA-hw7c-3rfg-p46j
google.golang.org/protobuf vulnerable to panic leading to denial of service
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | google.golang.org/protobuf | >= 1.29.0, < 1.29.1 | 1.29.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
Parsing invalid messages can panic.
Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.
References
External links from the advisory. They lead to third-party sites.